CVE-2026-3909
CVE-2026-3909
In short
A bug in Chrome's graphics engine (Skia) allows attackers to write data outside intended memory boundaries through a specially crafted webpage, potentially crashing the browser or executing malicious code.
Technical detail
Out-of-bounds write vulnerability in Skia rendering engine exploitable via crafted HTML; remote attack vector requiring user to visit malicious page; impacts memory integrity and may enable code execution or denial of service.
Summary generated and translated by AI from the official description.
Out of bounds write in Skia in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Google · ChromeWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →